We provide virtual course about ISTQB Security Tester Certificate in english. This course prepares testing professionals for the ISTQB® Security Tester certification by providing a structured approach to security testing principles, techniques and practices.
Course description:
You will learn how to identify vulnerabilities, understand threats and apply test methods that strengthen software security throughout the development lifecycle. The course emphasises both theory and practical application so you can effectively assess and mitigate security risks in real-world systems. Throughout this training, you gain insight into security vulnerabilities, risk-based testing strategies and specialised security test techniques such as penetration, fuzz and vulnerability scanning.
The course follows the ISTQB® Security Tester syllabus, and includes exercises and examples to prepare you for both the official exam and practical implementation. You will also learn how security testing integrates with traditional testing practices and DevOps workflows.
Course objectives:
After completing this course you will be able to:
• Understand the goals and principles of security testing
• Analyse risks and define security testing goals
• Use security test techniques to uncover vulnerabilities
• Interpret security test results and recommend mitigations
• Integrate security testing into development and QA processes
Course content:
Module 1 - Security foundations and risk management:
• The course introduces the key concepts of security testing, including threat modelling, vulnerability categories and risk assessment as part of test planning.
Module 2 - Security test planning:
• You will learn how to define security test objectives, scope and criteria based on risk analysis to focus efforts on the most critical areas.
Module 3 - Security test techniques:
• The course covers specialised security test techniques such as vulnerability scanning, fuzz testing, injection testing and authentication checks, giving you tools to expose weaknesses in systems.
Module 4 - Non-functional considerations in security testing:
• Explore how performance, reliability and resilience intersect with security, and how to address non-functional attributes when designing and executing security tests.
Module 5 - Tools and automation:
• You gain practical insights into tools that support security testing, including scanners, proxies and automation frameworks that help identify and track issues efficiently.
Module 6 - Reporting and mitigation guidance:
• You learn how to report security findings effectively and provide actionable recommendations for development and operations teams.
Instructor: Sue Atkins
As a self-confessed bug-magnet, quality advocate and risk nut, Sue Atkins has been active in the world of software testing and process improvement for over thirty years. She has experience of software development from both the waterfall and Agile perspectives across a diverse range of sectors - from banking and telecoms to healthcare and retail.
Sue has a passion for training and loves to help others grow their skills in all dimensions of testing, quality and process improvement. She has spoken at a number of conferences, is co-chair of the Scottish Testing Group and was a member of the programme committee for EuroSTAR 2022 - Europe’s largest Testing Conference.
Target audience:
This course is appropriate for:
• Testers and test analysts
• QA professionals wanting to deepen security expertise
• Test consultants involved with security risk assessment
• Developers interested in security-focused testing
• Anyone working with secure delivery of software
Prerequisites:
• To take this course you must hold the ISTQB® Foundation Certificate. Experience with testing and knowledge of software development lifecycle concepts will help you get the most out of the training.
Language:
• The course is given in english
Course material:
The course fee includes course documentation and exercises